Hi Reiner, > On Wed, 2009-02-04 at 11:30 +1100, Michael Mansour wrote: > > > Change this: > > > *.info;mail.none;authpriv.none;cron.none;local1.none;daemon.info.none > > > /var/log/messages > > > > > > To this: > > > *.info;mail.none;authpriv.none;cron.none;local1.none;daemon.notice > > > /var/log/messages > > > > I think it should be > > *.info;mail.none;authpriv.none;cron.none;local1.none;daemon.none /var/log/messages
I've just popped that in. > > I've just tried that, restarted rsyslog and the messages for milter-regex > > keep > > appearing in /var/log/messages. > > > > I'm 100% these are daemon.info messages since I also use: > > > > mail.*;daemon.info -/var/log/maillog > > > > and the milter-regex messages that show up in /var/log/maillog are the same > > ones that show up in /var/log/messages. > > > > I'm pretty sure the reason that deamon.info is still going to > > /var/log/messages is because of the "*.info" entry at the beginning of that > > line, which catches daemon.info? > > Yes, because that says "everything with info severity, no matter what > the facility is, matches". > > > Is there a way I can stop daemon.info from showing up in /var/log/messages > > while keeping *.info on that same line? > > The .none in my example above is meant to exclude a specific facility > from the usual processing and this sounds like what you are looking for. > I barely remember that someone had problems with it. So if it does > not work, let me know. The part of the code that handles those old-style > selectors (old but still good!) is one of the few code sequences that > stem directly back to sysklogd and I can't outrule that something > went wrong during all that changes of the engine... > > Please let me know the outcome (saves me the lab). I think this is exactly what I'm looking for. So far I see no milter-regex messages in my /var/log/messages file while they are showing up in my /var/log/maillog file. Also, a restart of apache and crond still shows those messages going to /var/log/messages which is what I want. I'll keep monitoring over the next day or so but I think this is what I'm looking for. Thanks mate! Michael. > Rainer > > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com ------- End of Original Message ------- _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
